This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File:                     Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier:          ZA6qhLJ9fxd/BR4M2cxONdfa/W9Z35GCRUBj0A5JNg4=
Subject key identifier:   73:67:81:AE:DD:F0:3D:D0:A0:A7:EF:FE:47:62:77:EF:09:7E:58:23
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer:       /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial:       019C41A202FD79662668D2D8271B1EB0CA33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number:          0505
Signing time:             Mon 09 Feb 2026 09:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:02 +0000
Files and hashes:         1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
                          2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: u/cAv+mp2VyhiIYYitvlZj7EO1TP94LnNj/p5TMNC7k=)
                          3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:02:fd:79:66:26:68:d2:d8:27:1b:1e:b0:ca:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
        Validity
            Not Before: Feb  9 09:01:02 2026 GMT
            Not After : Feb 10 09:01:02 2026 GMT
        Subject: CN=736781aeddf03dd0a0a7effe476277ef097e5823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:fc:7b:ba:6b:aa:63:51:92:96:bf:ac:76:
                    5f:da:d8:4c:e5:4b:02:9b:af:20:a4:41:c5:7a:86:
                    23:d4:47:19:96:97:2d:30:4a:dc:84:7c:67:f2:96:
                    cc:43:cf:ca:04:aa:34:7b:19:31:2a:4b:14:54:90:
                    af:24:0f:1d:12:bb:1f:bb:68:cf:b6:23:67:5d:9c:
                    42:97:16:c0:c1:26:26:43:1f:bf:d4:1f:c2:ba:fa:
                    32:58:96:00:5c:b2:d9:50:d8:18:e4:48:22:30:93:
                    f3:95:af:b3:58:be:51:9d:a6:f9:71:3c:27:6e:0e:
                    86:2d:ae:a2:12:ea:a9:17:fb:94:df:c3:9b:34:13:
                    bd:04:e3:07:a2:84:98:39:c1:3c:7b:f9:92:a5:64:
                    00:ae:67:a4:e0:7b:5b:fc:8f:cd:04:9f:f8:48:aa:
                    3d:31:fd:d0:e7:be:d8:be:e5:0c:6c:1a:96:c4:4c:
                    65:a5:cc:fa:0b:fe:18:a8:ad:ab:53:06:94:aa:9a:
                    61:73:4e:18:6a:e6:06:02:21:e5:f4:b4:60:32:3f:
                    0d:1d:86:c4:ad:29:8a:6c:39:bf:43:75:cc:d6:56:
                    57:11:03:0c:8b:ac:b4:9a:3c:67:2c:e0:eb:bb:f4:
                    c0:1b:7b:ce:f1:b5:73:96:9d:5f:59:7c:2e:0b:ef:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:67:81:AE:DD:F0:3D:D0:A0:A7:EF:FE:47:62:77:EF:09:7E:58:23
            X509v3 Authority Key Identifier:
                keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:1c:4d:e6:99:69:75:51:f3:d7:e7:90:f5:ce:27:97:74:
         d5:df:06:5c:4d:5b:df:f0:99:0b:c0:7f:0e:44:ca:e3:f8:c6:
         1e:08:a6:0f:cb:01:d5:18:13:60:84:3d:1e:b8:10:55:03:41:
         e3:ac:ee:7d:e2:53:b1:d2:89:04:77:43:4a:58:26:e6:97:d6:
         8f:ed:b1:1b:04:a9:9b:ba:45:67:d4:99:51:a4:f2:53:5e:01:
         ed:09:ad:08:8e:78:9d:29:fe:39:4a:1f:c4:73:75:04:eb:77:
         86:7e:23:ac:c8:60:01:ca:e5:12:37:85:cb:b1:2b:f1:47:6c:
         c5:8e:fd:d9:88:6b:97:82:87:22:c9:c7:94:4d:c0:8e:3e:f8:
         d7:fe:79:a0:01:f1:d4:64:17:be:3e:2d:c0:d7:84:bf:53:d9:
         23:57:62:95:c8:cc:95:ca:c6:4f:79:9e:ba:3d:82:69:b3:4c:
         1c:38:97:48:0c:cf:22:29:b5:87:2d:43:a4:31:e9:30:8d:d9:
         69:63:7b:10:07:8a:48:e4:87:cc:48:c0:8f:ab:62:23:a3:d8:
         30:54:7d:2a:a2:9c:62:51:2f:9a:4d:73:ed:e0:ad:d7:15:c2:
         c8:3d:ee:f9:6b:bb:20:e2:ce:d0:16:a2:5b:48:29:29:81:a1:
         11:be:9b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:34 2026 by rpki-client